$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft File: 906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json) Hash identifier: L+dOcmYsFwt1dcTihLfnN2wsiFhBVW8Ro1eZejc13LU= Subject key identifier: 6A:18:51:C3:93:45:A7:D6:D8:16:C2:6C:58:26:B3:1D:32:26:B8:A3 Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft Manifest number: 01B9 Signing time: Thu 07 Aug 2025 03:33:22 +0000 Manifest this update: Thu 07 Aug 2025 03:33:21 +0000 Manifest next update: Thu 14 Aug 2025 03:33:21 +0000 Files and hashes: 1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: CTxJdE0cj5AV6C0HggFeKxUk2+Dalgk9XNgxoxaIhXs=) 2: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: gLkgMGp52FpOKp1gigsy7o/szzqT6RmtB38EXx+UWeM=) 3: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (hash: Osxjf+sQheLzTs1l6e5kACmrRT/9y2CBdjlI5qtBWLI=) 4: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (hash: P2QsrILj+XHKTHzfzBj8a8ezg5UMFN7g36qC5yV1Z+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Validity Not Before: Aug 7 03:33:21 2025 GMT Not After : Aug 14 03:33:21 2025 GMT Subject: CN=68941e81-c6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3a:6f:4a:7b:0b:7d:7b:07:ff:4e:a0:b5:70: 6e:df:bb:b8:b3:e4:97:25:d6:34:13:32:be:e0:1c: 08:58:66:7c:d4:7c:42:ea:f2:95:d2:f7:ff:14:50: 4a:9c:31:9f:fc:cb:75:d7:cc:09:d3:c3:d9:4e:ba: 6b:10:48:58:ef:13:27:6e:b1:d1:4c:3a:a7:46:c7: d4:a8:30:b0:0d:e1:44:d2:00:9b:a7:62:b4:82:1b: 64:fc:ec:0d:69:37:43:03:37:09:34:8a:67:7d:a9: 6d:48:a8:7f:c3:d5:e2:de:a8:ce:67:cc:ab:b7:3c: 02:21:7c:f7:9f:ea:66:1e:38:eb:d3:c0:09:2f:7c: 5b:e2:18:2b:39:e9:58:17:cb:a9:a7:3a:c1:91:b5: 85:88:99:d4:93:6e:b7:59:cb:b8:bc:04:8b:99:73: 55:d4:0b:8b:95:b7:57:d4:2a:d7:d0:eb:c4:54:b7: 75:83:3e:83:b3:24:aa:bd:51:0d:2d:a4:6a:94:51: 6f:09:07:24:c6:32:b0:23:5f:db:36:24:d6:ea:d8: f8:4c:1b:32:ab:c6:59:5a:7d:5c:0e:75:fc:92:99: 95:3a:96:89:da:8a:4a:86:2c:de:74:1b:9f:ea:08: 8f:14:78:35:f2:08:0e:b0:4e:fb:da:56:93:43:cf: be:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:18:51:C3:93:45:A7:D6:D8:16:C2:6C:58:26:B3:1D:32:26:B8:A3 X509v3 Authority Key Identifier: keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:b6:bb:3c:74:a2:3d:2a:d9:d8:27:46:b4:e6:1c:29:6e:9e: d5:40:2c:78:45:34:61:55:a9:6c:6e:b0:75:6a:d8:73:50:71: 0f:aa:ed:c3:2b:76:77:c1:06:2e:eb:8f:c8:fb:ea:95:60:ea: 24:62:9f:48:d5:8b:b3:68:c4:67:7e:51:ce:e1:d9:eb:e6:73: 23:e0:03:3d:7b:0b:ed:eb:d3:cd:d6:bb:1c:40:06:59:b1:8e: e4:53:0d:0f:98:14:b5:6d:f4:46:97:2b:73:88:84:54:03:e8: dc:0b:1f:5a:7a:e6:32:3a:4f:d4:72:d2:f6:67:b0:42:a5:81: 82:53:66:88:f1:87:f8:a4:ef:a2:15:01:46:6c:66:e5:25:03: 60:56:5b:58:52:b9:9f:7a:c4:0f:26:57:36:ae:85:05:3d:91: a6:4b:b6:c9:92:c2:28:85:4c:56:67:60:a0:fb:36:36:1b:1c: e9:f7:bf:5a:e9:29:5c:c4:7b:c1:77:8e:d6:4e:fa:ae:ba:a4: 13:b6:81:78:43:48:af:17:3d:b1:0c:0f:ed:e5:bc:0b:cb:04: 21:7b:7e:78:6e:d9:61:ba:52:73:8a:09:0e:0c:7a:90:94:5b: b6:fb:8b:53:0f:8a:a4:7a:83:31:51:07:62:41:4d:08:c5:3d: 22:5a:e5:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAzMjkxMTAvBgNVBAUTKEY3NEU5NkNBOUVFOTM2MDc0NTY0MjkyOTYwRkJDMUY5 Q0YzNDg1NEQwHhcNMjUwODA3MDMzMzIxWhcNMjUwODE0MDMzMzIxWjAYMRYwFAYD VQQDEw02ODk0MWU4MS1jNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTpvSnsLfXsH/06gtXBu37u4s+SXJdY0EzK+4BwIWGZ81HxC6vKV0vf/FFBK nDGf/Mt118wJ08PZTrprEEhY7xMnbrHRTDqnRsfUqDCwDeFE0gCbp2K0ghtk/OwN aTdDAzcJNIpnfaltSKh/w9Xi3qjOZ8yrtzwCIXz3n+pmHjjr08AJL3xb4hgrOelY F8uppzrBkbWFiJnUk263Wcu4vASLmXNV1AuLlbdX1CrX0OvEVLd1gz6DsySqvVEN LaRqlFFvCQckxjKwI1/bNiTW6tj4TBsyq8ZZWn1cDnX8kpmVOpaJ2opKhizedBuf 6giPFHg18ggOsE772laTQ8++lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoYUcOT RafW2BbCbFgmsx0yJrijMB8GA1UdIwQYMBaAFPdOlsqe6TYHRWQpKWD7wfnPNIVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDMyOS80NUQ2RUZGQ0Qz OUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5nZEZaQ2twWVB2Qi1jODBo VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwNld5cDdwTmdkRlpDa3BZUHZCLWM4MGhVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDMyOS80NUQ2RUZGQ0QzOUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5n ZEZaQ2twWVB2Qi1jODBoVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqtrs8dKI9KtnYJ0a05hwpbp7VQCx4RTRhValsbrB1athzUHEPqu3D K3Z3wQYu64/I++qVYOokYp9I1YuzaMRnflHO4dnr5nMj4AM9ewvt69PN1rscQAZZ sY7kUw0PmBS1bfRGlytziIRUA+jcCx9aeuYyOk/UctL2Z7BCpYGCU2aI8Yf4pO+i FQFGbGblJQNgVltYUrmfesQPJlc2roUFPZGmS7bJksIohUxWZ2Cg+zY2Gxzp979a 6SlcxHvBd47WTvquuqQTtoF4Q0ivFz2xDA/t5bwLywQhe354btlhulJzigkODHqQ lFu2+4tTD4qkeoMxUQdiQU0IxT0iWuWH -----END CERTIFICATE-----Generated at Thu Aug 7 23:58:41 2025 by rpki-client